Overview

overview

8

Static

static

8

1139b174bf...dc.exe

windows7_x64

8

1139b174bf...dc.exe

windows10-2004_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1139b174bfc32ce3c26494dd59585c6fd4b199084d8d4b0e439703a25b4f29dc

  • Size

    275KB

  • Sample

    220604-jne75ahgfm

  • MD5

    d785e64bc3533bd6a2f69d82d50bc33b

  • SHA1

    83963a262d48ad7b10151c3be7748ab15086a826

  • SHA256

    1139b174bfc32ce3c26494dd59585c6fd4b199084d8d4b0e439703a25b4f29dc

  • SHA512

    93796bbed214a4ff97f10b497cb0b42ed37d0e138a2e0b3dded99707251cfafe3b83abd3e69ca8c20991338f7f03885da573872ea6c79b95af043bb361e2decc

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      1139b174bfc32ce3c26494dd59585c6fd4b199084d8d4b0e439703a25b4f29dc

    • Size

      275KB

    • MD5

      d785e64bc3533bd6a2f69d82d50bc33b

    • SHA1

      83963a262d48ad7b10151c3be7748ab15086a826

    • SHA256

      1139b174bfc32ce3c26494dd59585c6fd4b199084d8d4b0e439703a25b4f29dc

    • SHA512

      93796bbed214a4ff97f10b497cb0b42ed37d0e138a2e0b3dded99707251cfafe3b83abd3e69ca8c20991338f7f03885da573872ea6c79b95af043bb361e2decc

    Score
    8/10
    persistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

3
T1112

Install Root Certificate

1
T1130

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks